zap.store on Nostr: Github cannot be trusted with releases. We're slowly fixing this, making good ...
Github cannot be trusted with releases.
We're slowly fixing this, making good progress with the developer signing tool.
To which I'm adding an option to upload to a Blossom server to completely bypass the dependency on Github.
Will be sharing a preview next week.
Somehow 48 minutes ago our release for Windows was replaced. @github doesn't provide any audit log to understand what happened.
We have just removed the fake installer but clearly that's not enough. We will continue investigating the issue.
Have anyone suffered something similar?
Published at
2024-07-10 15:33:48Event JSON
{
"id": "f135adfe74e1fb0f2ec32de9239882ae2e731649a9a65600f30e0c8168c5db92",
"pubkey": "78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d",
"created_at": 1720618428,
"kind": 1,
"tags": [
[
"e",
"0000ed215b1bd9345fe182dd187188fe8ed8709f064b72d07c17623dd4e20ceb",
"",
"mention"
],
[
"p",
"9e30e940238cd9ebebc6328176dd4d109812129442f2a6c38727fc66fa7ea90a",
"",
"mention"
],
[
"q",
"0000ed215b1bd9345fe182dd187188fe8ed8709f064b72d07c17623dd4e20ceb"
]
],
"content": "Github cannot be trusted with releases.\n\nWe're slowly fixing this, making good progress with the developer signing tool.\n\nTo which I'm adding an option to upload to a Blossom server to completely bypass the dependency on Github. \n\nWill be sharing a preview next week. \n\nnostr:nevent1qqsqqq8dy9d3hkf5tlsc9hgcwxy0arkcwz0svjmj6p7pwc3a6n3qe6cpz9mhxue69uhkummnw3ezuamfdejj7q3qnccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qxpqqqqqqzqu8glr",
"sig": "cd4fa2c67a70111ba19c1ec52f59deb5240467ea5800ae1aeafce6d3559f3619e3a9743b41627b2cc8a175c1b9522e90092c37970f93b5eb840fcd98a996da7b"
}
